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An important feature of digital signatures is to serve as non-repudiation evidence. To be 
eligible as non-repudiation evidence, a digital signature on an electronic document should 
remain valid until its expiry date which is specified by some non-repudiation policy. As 
signature keys may be compromised and the validity of signatures may become 
questionable, additional security mechanisms need to be imposed on digital signatures. This 
paper examines the mechanisms for maintaining the validity of ... 
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This paper describes the configuration and intermodule communication of a MULTImodule 
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complex protection policies. The primary mechanisms are structured and verifiable. The 
entire approach is immediately extendible to distributed pr ... 
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The paper surveys the authentication services used by modern computer systems and 
presents the major operational authentication services employed by commercial companies, 
banking as well as government departments. As distributed system services are susceptible 
to a variety of threats mounted by intruders as well as legitimate users of the system, 
password-based authentication is not suitable for use on computer networks. 
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We present a related family of authentication and digital signature protocols based on 
symmetric cryptographic primitives which perform substantially better than previous 
constructions. Previously, one-time digital signatures based on hash functions involved 
hundreds of hash function computations for each signature; we show that given online 
access to a timestamping service, we can sign messages using only two computations of a 
hash function. Previously, techniques to sign infinite streams invol ... 
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The development of LSI components has induced a substantial research effort into the 
possibility of applying conglomerations of small processors on some computational problems 
previously limited to large processors. The primary advantages of "multi-microprocessor 
architectures" are their potential for improvements in cost, reliability, and possibly speed 
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This paper introduces ID-based secret-key cryptography, in which secret keys are privately 
and uniquely binded to an identity. This enables to extend public-key cryptography features 
at the high throughput rate of secret-key cryptography. As applications, efficient login 
protocols, an enhanced version of Kerberos, and an ID-based MAC algorithm are 
presented. ID- based systems were initially developed in the context of public-key 
cryptography by removing the need of explicit public keys. The ... 

Keywords: ID-based systems, Kerberos, MACs, authentication protocols, one-time 
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For some time, the networking community has assumed that it is impossible to do IP routing 
lookups in software fast enough to support gigabit speeds. IP routing lookups must find the 
routing entry with the longest matching prefix, a task that has been thought to require 
hardware support at lookup frequencies of millions per second. We present a forwarding 
table data structure designed for quick routing lookups. Forwarding tables are small enough 
to fit in the cache of a conventional genera ... 
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This is a report of work-in-progress on a multi-user sketching tool. The intent behind the 
project is to produce a simple tool for use in multi-user design and brainstorming sessions. 
The tool, xsketch, is intended to function across existing internetwork facilities and run on a 
variety of platforms. This paper covers the requirements and design goals for the tool. 
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A number of key distribution protocols using multiple authentication servers, where a 
minority of them may be untrustworthy, have recently been proposed. This paper analyses 
the problem of key distribution using minimally trusted multiple servers, and presents a new 
protocol. In this protocol, as long as all servers do not collude to defraud the clients, either a 
session key (not known to any server) is successfully established, or the protocol fails in 
such a way that the clients are aware that ... 
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Ideally, software toolkits for collaborative applications should provide generic, reusable 
components, applicable in a wide range of circumstances, which software developers can 
assemble to produce new applications. However, the nature of CSCW applications and the 
mechanics of group interaction present a problem. Group interactions are significantly 
constrained by the structure of the underlying infrastructure, below the level at which 
toolkits typically offer control. This article describe ... 

Keywords: consistency control, consistency guarantees, data distribution, divergency, 
metalevel programming, open implementation, software architecture 



8 Internet routing instability B 
Craig Labovitz, G. Robert Malan, Farnam Jahanian 

October 1998 IEEE/ACM Transactions on Networking (TON), Volume 6 issue 5 

Full text available: ' H pdf(277.43 KB) Additional Information: full citation , references , citings , index terms 



Keywords: communication system, communication system routing, computer network, 
internet, routing, stability 



9 Conditional purchase orders 
John Kelsey, Bruce Schneier 

April 1997 Proceedings of the 4th ACM conference on Computer and communications 
security 

Full text available: Wi pdff 853.77 KB) Additional Information: full citation , references , index terms 



http://portal.acm.or^ 7/27/04 



Results (page 1): +arbiter, +transactioi^+session Page 3 of 5 

10 A modular multirate video distribution system: design and dimensioning Q 
Yiu-Wing Leung, Tak-Shing Yum 

December 1994 IEEE/ACM Transactions on Networking (TON), volume 2 issue 6 

Full text available: W\ pdf(1.28 MB) Additional Information: full citation , references , index terms , review 



11 Consistency guarantees: exploiting application semantics for consistency management Q 
in a collaboration toolkit 
Paul Dourish 

November 1996 Proceedings of the 1996 ACM conference on Computer supported 
cooperative work 

Full text available: ^ pdf(1.30 MB) Additional Information: full citation , references , citings , index terms 



Keywords: CSCW toolkits, Prospero, application control, consistency guarantees, 
consistency management 



i2 An architectural approach to minimizing feature interactions in telecommunications Q 
Israel Zibman, Carl Woolf, Peter O'Reilly, Larry Strickland, David Willis, John Visser 
August 1996 IEEE/ ACM Transactions on Networking (TON), Volume 4 issue 4 

Full text available: Wi pdff1.55 MB) Additional Information: full citation , references , index terms 



13 Towards a taxonomy of software connectors 
Nikunj R. Mehta, Nenad Medvidovic, Sandeep Phadke 

June 2000 Proceedings of the 22nd international conference on Software engineering 

Additional Information: full citation , abstract , references , citings , index 
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Software systems of today are frequently composed from prefabricated, heterogeneous 
components that provide complex functionality and engage in complex interactions. Existing 
research on component-based development has mostly focused on component structure, 
interfaces, and functionality. Recently, software architecture has emerged as an area that 
also places significant importance on component interactions, embodied in the notion of 
software connectors. However, the current level of underst ... 
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This paper examines the network inter-domain routing information exchanged between 
backbone service providers at the major U.S. public Internet exchange points. Internet 
routing instability, or the rapid fluctuation of network reachability information, is an 
important problem currently facing the Internet engineering community. High levels of 
network instability can lead to packet loss, increased network latency and time to 
convergence. At the extreme, high levels of routing instability have lea ... 
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Maintenance tends to degrade the structure of software, ultimately making maintenance 
more costly. At times, then, it is worthwhile to manipulate the structure of a system to 
make changes easier. However, manual restructuring is an error-prone and expensive 
activity. By separating structural manipulations from other maintenance activities, the 
semantics of a system can be held constant by a tool, assuring that no errors are introduced 
by restructuring. To allow the maintenance team to focus ... 

Keywords: CASE, flow analysis, meaning-preserving transformations, software 
engineering, software evolution, software maintenance, software restructuring, source-level 
restructuring 
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The "Whiteboards" system is intended to be an electronic equivalent of the whiteboards and 
corkboards that we have in our offices. A Whiteboard database has similar qualities of 
storing disparate collections of data and saving their spatial location in a window to help 
with organization. A Whiteboard database can contain references to arbitrary entities: text 
files, notes, programs, tools, pictures, etc. Whiteboards runs as an application in the Cedar 
programming environment dev ... 
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Deep submicron technol^^ scaling has two major ramifications o^he design process. First, 
reduced feature size significantly increases wire delay, thus resulting in critical paths being 
dominated by global interconnect rather than gate delays. Second, ultra high level of 
integration mandates design of systems-on-chip that encompass numerous intra- 
synchronous blocks with decreased functional granularity and increased communication 
demands. To address these issues we have developed an on-chip bu ... 
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Behavioral HDL descriptions are commonly used to capture the high-level functionality of a 
hardware circuit for simulation and synthesis. The manual process of creating a behavioral 
description is error prone, so significant effort must be made to verify the correctness of 
behavioral descriptions. Simulation-based validation and formal verification are both 
techniques used to verify correctness. We investigate validation because formal verification 
techniques are frequently intractable for large ... 
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Adaptive encoding has shown to be an effective approach to bus power minimization in 
situations where characterization of the input statistics is not available. In this paper, we 
propose a novel technique for adaptive bus encoding that, conversely from existing 
solutions, exploits spatial correlations in the input data being transmitted to increase the 
accuracy in the dynamic selection of the encoding function. We discuss the encoding 
algorithm and we describe an architecture for its implem ... 
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Full text available: ^ pdf(762.94 KB) Additional Information: full citation , abstract , references , index terms 

We introduce a technique for using an untrusted device, such as a hand-held personal digital 
assistant or a laptop to perform real financial transactions without a network. We utilize the 
tamper-resistant nature of smartcards to store value on them and perform probabilistic 
computations based on user input. We discuss an application of this to gambling. The 
technique has the properties that the user is guaranteed to make money when he wins and 
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With the actual penetration of expert systems into the business world, the question is, how 
can expert systems be used to enhance the existing information systems with more 
intelligence in usage and operation. This interest is not surprising due to the advancement of 
the fifth generation of computer technology and avid interest in the field of Artificial 
Intelligence. This paper presents a conceptual model for analysing complex real world 
problems. The model, known as the Concept ... 
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In this report we discuss ongoing research in the area of object-oriented database systems 
at the CWI. The central theme of this paper is the friction encountered when using an 
object-oriented (O-O) language, such as Smalltalk, in the database arena. A series of (open) 
database issues is given for which the object-oriented paradigm does not provide an elegant 
solution. A refinement of the 0-0 concepts is given which emphasizes the dynamic 
classification of objects through its characteristic ... 
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In this paper, I describe the design of a collection review policy for the Digital Library for 
Earth System Education (DLESE). A distinctive feature of DLESE as a digital library is the 
&lquo;DLESE community&rquo;, composed of voluntary members who contribute metadata 
and resource reviews to DLESE. As the DLESE community is open, the question of how to 
evaluate community contributions is a crucial part of the review policy design process. In 
this paper, technological frames theory is used ... 

Keywords: content analysis, decision making, design, digital library, ethnography, peer 
review, technological frames 
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A method of user password authentication is described which is secure even if an intruder 
can read the system's data, and can tamper with or eavesdrop on the communication 
between the user and the system. The method assumes a secure one-way encryption 
function and can be implemented with a microcomputer in the user's terminal. 

Keywords: authentication, one-way function, passwords, security 
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The Border Gateway Protocol (BGP) is the de facto inter-domain routing protocol used to 
exchange reachability information between Autonomous Systems in the global Internet. BGP 
is a path-vector protocol that allows each Autonomous System to override distance-based 
metrics with policy-based metrics when choosing best routes. Varadhan etal. [18] have 
shown that it is possible for a group of Autonomous Systems to independently define BGP 
policies that together lead to BGP protocol os ... 
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